af46adf5a94187d8b78057e2b4674025_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af46adf5a94187d8b78057e2b4674025_JaffaCakes118
Size

137KB
MD5

af46adf5a94187d8b78057e2b4674025
SHA1

edef8a51d115baad8cbfb90f3889adb62ac3fe05
SHA256

c1647ff73d10eccb55811ae2cf1f7fd6bcbc4326a3a04032374684d8e080235e
SHA512

648c62ea77ea8d1e15c9190a97f325a41648924ef8d897e855396d5c23c79e670bb420ee3b3a6985c32d83b905e37d6d4a18c90a860cfc69559253dc4db2a1f7
SSDEEP

3072:KbPN+Vmi91ASZ4L016HxawPQrwmy5MmtiJCMAiTBtPiSfL/U:KKJZJ1Gx9uwmy7g0biTj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af46adf5a94187d8b78057e2b4674025_JaffaCakes118

Files

af46adf5a94187d8b78057e2b4674025_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ad5fded777f153d7895df72c960367e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
ExitThread
FreeLibrary
GetACP
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeThread
GetFileTime
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
LoadLibraryA
QueryPerformanceCounter
SetEnvironmentVariableA
SetUnhandledExceptionFilter
TerminateThread
VirtualAlloc
VirtualProtect
lstrcmpA

msvcrt

strstr
strcat
fwrite
atoi
atol
wcscmp

user32

PostQuitMessage
MsgWaitForMultipleObjects
FillRect
EnableWindow
CreatePopupMenu
GetClassLongA

comctl32

CreateStatusWindowA
GetEffectiveClientRect
InitCommonControls
ShowHideMenuCtl
CreatePropertySheetPageA

Sections

.text
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ